is not mapped to a Windows account is treated by Server for NFS as an anonymous user. By default,
the user identifier (UID) and group identifier (GID) is -2.
For example, if files are created on an NFS Share by UNIX users who are not mapped to Windows
users, the owner of those files are listed as anonymous user and anonymous group, (-2,-2).
By default, Server for NFS does not allow anonymous users to access a shared directory. When an
NFS share is created, the anonymous access option can be added to the NFS share. The values can
be changed from the default anonymous UID and GID values to the UID and GID of any valid UNIX
user and group accounts.
NOTE:
In Windows Server 2003, the Everyone group does not include anonymous users by default.
When allowing anonymous access to an NFS Share, the following must be performed by a user with
administrative privileges due to Windows Storage Server 2003 security with anonymous users and
the Everyone group.
1.
Click
Remote Desktop
. Log on to the storage system.
2.
Click
Start
>
Control Panel
>
Administrative Tools
, and then click
Local Security Policy
.
3.
In Security Settings, double-click
Local Policies
, and then click
Security Options
.
4.
Right-click
Network access: Let Everyone permissions apply to anonymous users
, and then click
Properties
.
5.
To allow permissions applied to the Everyone group to apply to anonymous users, click
Enabled
.
The default is
Disabled
.
6.
Restart the NFS server service. From a command prompt, enter
net stop nfssvc
. Then enter
net start nfssvc
. Notify users before restarting the NFS service.
7.
Assign the Everyone group the appropriate permissions on the NFS Share.
8.
Enable anonymous access to the share.
To enable anonymous access to an NFS share:
1.
Open Windows Explorer by clicking
Start
>
Run
, and entering Explorer.
2.
Navigate to the NFS share.
3.
Right-click the NFS Share, and then click
Properties
.
4.
Click
NFS Sharing
.
5.
Select the
Allow Anonymous Access
checkbox.
6.
Change from the default of -2,-2, if desired.
7.
Click
Apply
.
8.
Click
OK
.
Best practices for running Server for NFS
•
Provide user-level security
•
Secure files
•
Secure new drives
•
Allow users to disconnect before stopping the Server for NFS service
HP StorageWorks All-in-One Storage System
179
Содержание AK373A - StorageWorks All-in-One Storage System 1200r 5.4TB SAS Model NAS Server
Страница 1: ...HP StorageWorks All in One Storage System user guide Part number 440583 006 First edition June 2008 ...
Страница 14: ...14 ...
Страница 34: ...Installing and configuring the server 34 ...
Страница 48: ...Storage system components 48 ...
Страница 56: ...Storage management overview 56 ...
Страница 96: ...Managing data protection 96 ...
Страница 100: ...Managing storage 100 ...
Страница 134: ...System recovery 134 ...
Страница 184: ...Microsoft Services for Network File System MSNFS 184 ...
Страница 198: ...BSMI notice Japanese notice Korean notice A B Class A equipment Class B equipment Regulatory compliance and safety 198 ...
Страница 216: ...Index 216 ...